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REMARKS/ARGUMENTS 

Prior to entry of this amendment, claims 1-36 were pending in this application. 
Claims 1-8, 13-19, 23-29, 33, and 34 have been amended and claims 12, 22, and 32 have been 
canceled herein. No new claims have been added. Therefore, claims 1-11,13-21, 23-31, and 33- 
36 remain pending in this application. Applicant respectfully requests reconsideration of this 
application for at least the reasons presented below. 

35 U.S.C. S103 Rejection, Du in view of SiteMinder 

The Office Action has rejected claims 1-36 under 35 U.S.C. §103(a) as being 
unpatentable over U. S. Patent No. 6,041,306, issued March 21, 2000, to Du et al. (hereinafter 
"Du") in view of Netegrity, Inc., "SiteMinder Policy Server Operations Guide", Version 4.0, 
published 1997 (hereinafter "SiteMinder"). The Applicants respectfully submit that the Office 
Action does not establish a prima facie case of obviousness in rejecting these claims. Therefore, 
the Applicants request reconsideration and withdrawal of the rejection. 

In order to establish a prima facie case of obviousness, the Office Action must 
establish: 1) some suggestion or motivation, either in the references themselves or in the 
knowledge generally available to one of ordinary skill in the art, to modify the references or 
combine their teachings; 2) a reasonable expectation of success of such a modification or 
combination; and 3) a teaching or suggestion in the cited prior art of each claimed limitation. 
See MPEP § 706.02(j). However, as will be discussed below, the references cited by the Office 
Action do not teach or suggest each claimed limitation. For example, neither reference, alone or 
in combination, teaches or suggests associating workflows with one or more groups in an 
identity system, receiving a request to perform a task that pertains to at least one identity profile 
of an entity in said identity system, and performing a first workflow for the task, the first 
workflow associated with a first group that includes a target identity profile of the request 
wherein the first workflow comprises a predefined set of steps that perform the task to affect the 
target identity profile. 
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Du is directed to "a system and method for performing flexible workflow process 
execution in a distributed workflow management system." (Col. 2, lines 59-61) Under Du "the 
distributed workflow management system is formed by a computer network comprising a 
plurality of computers." (Col. 3, lines 1-3) "A workflow process management system operates 
on one or more of the computers to control the computer network in executing the workflow 
process." (Col. 3, lines 4-7) "Each workflow process includes a sequence of activities, each of 
which is ordinarily performed by one of the computer systems." (Col. 4, lines 34-36) "The 
WFPM system provides procedural automation of the workflow process by managing the 
sequence of process activities and the invocation of appropriate user, machine or 
microprocessor-controlled device resources associated with the various activity steps." (Col. 4, 
lines 51-56) That is, Du teaches controlling distribution of processing of tasks between a number 
of computers in a network. However, Du does not teach or suggest performing a first workflow 
for a task, the first workflow associated with a first group that includes a target identity profile of 
the request wherein the first workflow comprises a predefined set of steps that perform the task 
to affect the target identity profile. 

The cited portions of SiteMinder relate to policies and policy domains (p.235-237 
and 325-328) and responding to requests for resources (p. 301-304). Under SiteMinder, policies, 
which may be grouped together into policy domains, control a user's access to resources. 
Resource within a policy domain, i.e., resource to which a policy domain applies, can be further 
grouped into realms. Access to the resource is controlled by rules defined for the realm that 
contains the requested resource. (See pages 235 and 325) However, the cited portions of 
SiteMinder do not teach or suggest performing a first workflow for a task, the first workflow 
associated with a first group that includes a target identity profile of the request wherein the first 
workflow comprises a predefined set of steps that perform the task to affect the target identity 
profile. 

The combination of references are no more relevant to the pending claims than 
either reference alone since neither Du nor the cited portions of SiteMinder teach or suggest, 
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alone or in combination, performing a first workflow for a task, the first workflow associated 
with a first group that includes a target identity profile of the request wherein the first workflow 
comprises a predefined set of steps that perform the task to affect the target identity profile. That 
is, neither Du nor the cited portions of SiteMinder teach or suggest, alone or in combination, 
affecting a target identity profile by performing a workflow associated with a group that contains 
the target identity profile. Rather Du teaches controlling distribution of processing of tasks 
between a number of computers in a network while the cited portions of SiteMinder teach 
controlling user access of resources based on policies applied to groups of resources. 

Claim 1, upon which claims 2-11, 13, and 34-36 depend, claim 14, upon which 
claims 15-21 and 23 depend, and claim 24, upon which claims 25-31 and 33 depend, each recite 
in part "associating workflows with one or more groups in an identity system, each group 
including one or more users of the identity system; receiving a request to perform a task that 
pertains to at least one identity profile of an entity in said identity system; and performing a first 
workflow for said task, said first workflow is associated with a first group that includes a target 
identity profile of said request; wherein: said first workflow comprises a predefined set of steps 
that perform said task to affect the target identity profile, said predefined set of steps comprising 
a first step and a second step." Neither Du nor the cited portions of SiteMinder teach or suggest, 
alone or in combination, affecting a target identity profile by performing a workflow associated 
with a group that contains the target identity profile. Rather Du teaches controlling distribution 
of processing of tasks between a number of computers in a network while the cited portions of 
SiteMinder teach controlling user access of resources based on policies applied to groups of 
resources. For at least these reasons, claims 1-11, 13-21, 23-31, and 33-36 should be allowed. 

CONCLUSION 

In view of the foregoing, Applicants believe all claims now pending in this 
application are in condition for allowance and an action to that end is respectfully requested. 
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If the Examiner believes a telephone conference would expedite prosecution of 



this application, please telephone the undersigned at 303-571-4000. 



TOWNSEND and TOWNSEND and CREW LLP 
Two Embarcadero Center, Eighth Floor 
San Francisco, CA 941 1 1-3834 
Tel: 303-571-4000 (Denver) 
Fax: 303-571-4321 (Denver) 

Enclosures 

WJD/sbm 

60735775 v1 



Respectfully submitted, 



Date: 15~/H/Q& 
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